Title: WordPress Site Malware
Last modified: October 13, 2023

---

# WordPress Site Malware

 *  [Jackhedger](https://wordpress.org/support/users/jackhedger/)
 * (@jackhedger)
 * [2 years, 7 months ago](https://wordpress.org/support/topic/wordpress-site-malware/)
 * Hi,
 * I ran support for this site a while back, and they have recently got in touch
   with me to request urgent help with their site as they lost access and think 
   that there might be some malware on the site. I attempted to restore from backup,
   it didn’t work. They host with Strato.fr, a company I’ve never worked with, and
   they aren’t giving much support.
   Upon looking through the files via FTP, I can
   see issues in a number of places, and a fair amount of obfuscated JS and things,
   all very suspicious.
 * I’m slightly at a dead end. I tried removing all weird code, re-installed wordpress(
   this half worked but – duh! – lost the old website), but nothing has got me anywhere.
 * I’m getting the following error, with a long string of numbers between the brackets:
 * [@include](https://wordpress.org/support/users/include/) base64_decode(” “)
 * Help!
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fwordpress-site-malware%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 1 replies (of 1 total)

 *  Moderator [threadi](https://wordpress.org/support/users/threadi/)
 * (@threadi)
 * [2 years, 7 months ago](https://wordpress.org/support/topic/wordpress-site-malware/#post-17122977)
 * You should empty the web space completely, change all access data and then restore
   a backup. Then immediately install all pending updates (WordPress, plugins and
   theme) and, if not available, install a security plugin.
 * Also have a look at the articles here:
   [https://wordpress.org/documentation/article/faq-my-site-was-hacked/](https://wordpress.org/documentation/article/faq-my-site-was-hacked/)
   [https://wordpress.org/documentation/article/hardening-wordpress/](https://wordpress.org/documentation/article/hardening-wordpress/)

Viewing 1 replies (of 1 total)

The topic ‘WordPress Site Malware’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 2 replies
 * 2 participants
 * Last reply from: [threadi](https://wordpress.org/support/users/threadi/)
 * Last activity: [2 years, 7 months ago](https://wordpress.org/support/topic/wordpress-site-malware/#post-17122977)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics